IIROC conducted cybersecurity self-assessment surveys of all Dealers in 2016 and 2018. The surveys were based on the National Institute of Standards and Technology (NIST) cybersecurity framework.
After the results were analyzed and risk-scored, IIROC issued a confidential Cybersecurity Report (CSR) to each Dealer:
identifying their level of cybersecurity maturity/preparedness and vulnerabilities, and
setting out high-level recommendations for priority attention.